Tags: domcyrus/rustnet

Release v1.5.0

Kubernetes pod/container attribution, native annotated PCAPNG export, a new
process Activity view, gradient braille graphs, event-driven Windows ETW
process attribution, and root-privilege dropping after initialization on
Linux, macOS, and FreeBSD. Library crates bumped to 0.4.0. See CHANGELOG.md
for details.

Release v1.4.0

TUI redesign (muted theme, stable layout, details continuity), FTP DPI,
DNS/mDNS/LLMNR response IPs, Landlock v6 IPC scoping, and hot-path perf work.
Splits RustNet into a four-crate workspace; rustnet-core, rustnet-capture, and
rustnet-host are now published on crates.io. See CHANGELOG.md for details.

Release v1.3.0

- Major TUI refresh: redesigned tabs, stats panel, and details view
- New per-field colors, status dot, and magenta panel borders
- Remote address scope labels (PUBLIC/PRIVATE/etc.) in the connection list
- CLI: reverse DNS resolution enabled by default (--no-resolve-dns to opt out)
- QUIC parser hardening: bounds checks for varint/token_len
- Dependency and OUI database updates
- Release pipeline reliability fixes

Release v1.2.0

Added:
- Windows restricted token sandbox (#206)
- macOS Seatbelt sandboxing, later tightened (#196, #203)
- Linux sandbox hardening: drop capabilities and clear ambient set (#208)
- UI: process privilege shown in security section (#197)
- Filter: exact port matching and regex support (#195)
- VLAN support in PKTAP/SLL parsers (#202)
- VLAN header in layer 3 extraction (#199, thanks @deepakpjose)
- IGMP protocol parsing (#209, thanks @deepakpjose)
- Process name for wildcard /proc/net entries (#218, thanks @deepakpjose)

Fixed:
- Default interface selection via active routing table (#194, thanks @l1a)
- Root detection on Unix via geteuid() (#192, thanks @DeepChirp)

Changed:
- CPU efficiency improvements across hot paths — rate calculation moved to refresh (#220, @deepakpjose), timeouts avoided (#213, @deepakpjose), threads named for observability (#212, @deepakpjose), and allocations reduced in sort/snapshot paths (#222). Big thanks to @deepakpjose for driving the CPU-efficiency work that makes RustNet noticeably lighter on the CPU.
- FreeBSD platform cleanup (#205)
- Dependency updates

Special thanks to @deepakpjose for six contributions in this release: #199, #209, #212, #213, #218, #220.

Release v1.1.0

- Add OUI vendor lookup, historic connections toggle, mouse support
- Add GeoIP city lookup, Android builds, MQTT/STUN/BitTorrent detection
- Fix UB issues, light terminal readability, Android cross-compilation
- Security hardening, packet stats, ARP benchmarks

Release v1.0.0

- Add GeoIP location support
- Add PCAP export with process attribution sidecar
- Add eBPF-based PID tracking for ICMP connections
- Show process detection degradation warnings in UI
- Fix service name precedence
- Tighten SSH packet structure heuristic
- CI: reusable workflows, arm64 musl static builds

Release v0.18.0

- Process grouping with expandable tree view
- Traffic visualization Graph tab
- Reverse DNS hostname display
- BPF filter support
- New DPI protocols: NTP, mDNS, DHCP, SNMP, SSDP, NetBIOS
- Static musl builds for Linux (x86_64)

Release v0.17.0

- Add Landlock sandbox and capability dropping for Linux security
- Reorganize platform code into per-platform directories
- Add eBPF thread name resolution to main process names
- Add AUR package automation workflow
- Simplify QUIC DPI and unify SNI extraction
- Fix RateTracker test determinism

Release v0.16.1

- Fix cross-compilation build issues for eBPF on non-Linux platforms
- Switch FreeBSD to native VM builds instead of cross-compilation
- Fix build.rs to check TARGET instead of host platform

Release v0.16.0

- Network interface statistics feature with cross-platform support
- Link layer parsing improvements and modularization
- Windows and macOS interface statistics fixes